Privacy and Cookie Policy

1. Data controller

The controller of personal data processed in connection with the operation of PERON 12 GWARNA and use of www.peron12.pl is BEST WROCŁAW sp. z o.o., with its registered office at ul. Ostródzka 130, 03-289 Warszawa, KRS 0000918968, NIP 5242924472, REGON 389834519.

For personal data matters and to contact the Data Protection Officer, email rodo@peron12.pl or write to the registered office address, marking your correspondence “IOD”.

2. What data we process and for what purposes

Bookings and stays

We process identification and contact details, booking and stay details, billing details, payment information and any preferences for your stay that you provide voluntarily. We do so to enter into and perform a contract, handle payments, communicate before and after your stay and deal with complaints (Article 6(1)(b) GDPR). We process data required by tax and accounting regulations to comply with legal obligations (Article 6(1)(c) GDPR).

Contact and enquiries

When you contact us by form, email or telephone, we process the data you provide to answer your enquiry and continue the correspondence. The basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in managing correspondence and relationships with people interested in our services (Article 6(1)(f) GDPR).

Newsletter and electronic marketing

If you subscribe to our newsletter, we use your email address to send information about our services, events and promotions on the basis of your voluntary consent. You may withdraw consent at any time using the unsubscribe link in a message or by emailing recepcja@peron12.pl. Withdrawal does not affect the lawfulness of earlier processing.

Claims, security and service quality

We may process data to establish, exercise or defend claims, prevent abuse, ensure the safety of people and property and maintain necessary incident records. The basis is our legitimate interest (Article 6(1)(f) GDPR).

Website analytics

With your consent, we may use Google Analytics 4 or similar tools to measure website use and improve its operation. The basis for processing is consent (Article 6(1)(a) GDPR and the applicable rules on storing information on a user's device). You may change your consent at any time in the cookie settings.

3. Recipients of data

Data may be entrusted or disclosed to parties supporting us in providing services, only to the extent necessary, including in particular:

• the provider of the PREVIO hotel management system and booking engine;
• the Przelewy24 payment operator, banks and payment processors;
• providers of hosting, email, website support, analytics tools and cybersecurity;
• accountants, legal advisers, security, cleaning and maintenance companies, where necessary for their tasks;
• external booking platforms, if the booking was made through them;
• authorised public bodies, where disclosure is required by law.

We do not sell personal data.

4. Transfers outside the EEA

Some technology providers, particularly providers of Google services, may process data outside the European Economic Area. Where this happens, the mechanisms required by the GDPR are used, in particular an adequacy decision, the European Commission's standard contractual clauses and additional safeguards where necessary. Details depend on the services actually enabled and are available on request.

5. Retention periods

• booking and stay data: for the performance of the contract and subsequently until the limitation periods for claims expire;
• accounting and tax records: for the period required by law;
• correspondence: for the time needed to deal with the matter and subsequently until any potential claims become time-barred;
• newsletter data: until consent is withdrawn, you unsubscribe or the newsletter ends, with the possibility of retaining minimal information about an objection or withdrawal of consent to demonstrate compliance;
• analytics and cookie data: for the period specified in the cookie settings panel and the relevant tool's configuration;
• data relating to incidents and claims: until the matter is finally resolved and the periods required by law expire.

6. Your rights

Subject to the GDPR, you have the right to request access to, rectification or erasure of your data, restriction of processing and data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office. Before making a complaint, we encourage you to contact us so that we can clarify the matter.

7. Voluntary provision of data and automated decisions

Providing the data required for a booking is voluntary but necessary to enter into and fulfil it. Providing data in the contact form is voluntary, but we may be unable to reply without contact details. Subscribing to the newsletter is entirely voluntary.

As a rule, we do not make decisions about you that produce legal effects solely by automated means. Prices and availability may change automatically depending on dates, demand and the selected offer conditions, but the final booking decision rests with the Guest.

8. Cookies and similar technologies

Cookies are small pieces of information stored on or read from a user's device. We use them to operate the website and booking system, remember settings, measure traffic and, if such tools are implemented, conduct marketing activities.

Cookie categories

• Necessary: required for website operation, security, remembering privacy choices and handling bookings. Consent is not required where they are strictly necessary for the requested service.
• Functional: enable additional features, such as an embedded map. They are activated after consent where they involve device access or data transfer to an external provider.
• Analytics: help measure traffic and website use, for example through Google Analytics 4. They are activated only after consent.
• Marketing: used to personalise advertising or measure campaigns. If implemented, they are activated only after consent.

On your first visit, you can accept all optional categories, reject them or choose your settings. Refusing consent must not block basic access to the website or bookings. You can change your choice later using the permanent “Cookie settings” link in the footer.

You can also delete or block cookies in your browser settings. Blocking necessary cookies may prevent the website or booking process from working correctly.

9. External services

PREVIO

Opening the booking form or embedding the PREVIO engine may result in technical data and data entered during booking being transferred to the system provider. The parties' precise roles and the scope of processing depend on the service configuration and the contract with the PREVIO provider.

Przelewy24

When online payment is selected, the data necessary to carry out the transaction is transferred to the Przelewy24 operator, PayPro S.A., with its registered office at ul. Pastelowa 8, 60-198 Poznań, KRS 0000347935, NIP 7792369887. PayPro S.A. acts as a separate controller for payment processing, transaction security and regulatory obligations.

Google Maps

Google Maps should be activated only after the user's consent. Before consent, a static element should be displayed with a “Load map” button, information about the external provider and the Property's address as a text alternative.

Google Analytics 4

Google Analytics 4 should be configured so that analytics tags do not run before consent. Data collection should be limited to what is necessary and an appropriate retention period set.

10. Changes to this policy

This policy may be updated if the law, services or website configuration change. A new version will be published with its effective date. If a change requires renewed consent, we will ask for it again.